The Latest Threat Research and Intelligence

Get the Latest Cybersecurity Research, Threat Intelligence, and AI Security Insights from SentinelLABS.

Subscribe Now
TraderTraitor_APIs_ftr

Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties

North Korean operators built a foothold on a DevOps engineer's Mac in a campaign whose job interview lures deliver malware via Terraform lock files.

Read More
hf-agents_ftr

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond the published timeline.

Read More
model_is_malware_ftr

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

Read More
Mythos_sol_ftr

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their conclusions.

Read More

All SentinelLABS Posts

  • Kimsuky Evolves Reconnaissance Capabilities in New Global Campaign
    Advanced Persistent Threat
    Tom HegelMay 4, 2023

    Kimsuky Evolves Reconnaissance Capabilities in New Global Campaign

  • Transparent Tribe (APT36) | Pakistan-Aligned Threat Actor Expands Interest in Indian Education Sector
    Advanced Persistent Threat
    Aleksandar MilenkoskiApr 13, 2023

    Transparent Tribe (APT36) | Pakistan-Aligned Threat Actor Expands Interest in Indian Education Sector

  • Dissecting AlienFox | The Cloud Spammer’s Swiss Army Knife
    Adversary
    Alex DelamotteMar 30, 2023

    Dissecting AlienFox | The Cloud Spammer’s Swiss Army Knife

  • The Life and Times of SysInternals | How One Developer Changed the Face of Malware Analysis
    LABScon
    Juan Andrés Guerrero-SaadeMar 29, 2023

    The Life and Times of SysInternals | How One Developer Changed the Face of Malware Analysis

  • Operation Tainted Love | Chinese APTs Target Telcos in New Attacks
    Advanced Persistent Threat
    Aleksandar MilenkoskiMar 23, 2023

    Operation Tainted Love | Chinese APTs Target Telcos in New Attacks

  • Winter Vivern | Uncovering a Wave of Global Espionage
    Advanced Persistent Threat
    Tom HegelMar 16, 2023

    Winter Vivern | Uncovering a Wave of Global Espionage

  • IceFire Ransomware Returns | Now Targeting Linux Enterprise Networks
    Crimeware
    Alex DelamotteMar 9, 2023

    IceFire Ransomware Returns | Now Targeting Linux Enterprise Networks

  • WIP26 Espionage | Threat Actors Abuse Cloud Infrastructure in Targeted Telco Attacks
    Adversary
    Aleksandar MilenkoskiFeb 16, 2023

    WIP26 Espionage | Threat Actors Abuse Cloud Infrastructure in Targeted Telco Attacks

  • Cl0p Ransomware Targets Linux Systems with Flawed Encryption | Decryptor Available
    Crimeware
    Antonis TerefosFeb 7, 2023

    Cl0p Ransomware Targets Linux Systems with Flawed Encryption | Decryptor Available

  • MalVirt | .NET Virtualization Thrives in Malvertising Attacks
    Crimeware
    Aleksandar MilenkoskiFeb 2, 2023

    MalVirt | .NET Virtualization Thrives in Malvertising Attacks

  • DragonSpark | Attacks Evade Detection with SparkRAT and Golang Source Code Interpretation
    Adversary
    Aleksandar MilenkoskiJan 24, 2023

    DragonSpark | Attacks Evade Detection with SparkRAT and Golang Source Code Interpretation

  • NoName057(16) - The Pro-Russian Hacktivist Group Targeting NATO
    Adversary
    Tom HegelJan 12, 2023

    NoName057(16) - The Pro-Russian Hacktivist Group Targeting NATO